topic Re: DateParserVerbose - Failed to parse timestamp in Getting Data In

DateParserVerbose - Failed to parse timestamp

sharada — Mon, 02 Aug 2021 04:05:07 GMT

Hi Splunkers,

I am facing the below time stamp issues. Could you please help me with this issue.

08-01-2021 22:49:25.563 -0400 WARN DateParserVerbose - Failed to parse timestamp in first MAX_TIMESTAMP_LOOKAHEAD (800) characters of event. Defaulting to timestamp of previous event (Sun Aug 1 22:49:25 2021).

[props]

TIME_FORMAT = %m-%d-%Y%H:%M:%S.%3Q
SHOULD_LINEMERGE = False
is_valid = True
maxDist = 9999
BREAK_ONLY_BEFORE_DATE =
DATETIME_CONFIG = CURRENT
LINE_BREAKER = ([\r\n]+)
MAX_TIMESTAMP_LOOKAHEAD = 800
NO_BINARY_CHECK = true
category = Custom

Re: DateParserVerbose - Failed to parse timestamp

venkatasri — Mon, 02 Aug 2021 04:49:17 GMT

Hi @sharada

Can you replace with following.

[props] TIME_FORMAT = %m-%d-%Y %H:%M:%S.%3Q TIME_PREFIX = ^ SHOULD_LINEMERGE = false LINE_BREAKER = ([\r\n]+) NO_BINARY_CHECK = true category = Custom

---

An upvote would be appreciated and Accept solution if this reply helps!

Re: DateParserVerbose - Failed to parse timestamp

sharada — Mon, 02 Aug 2021 15:05:42 GMT

Thanks for your response Venkatasri. I modified the props as you suggested but the issue still appears..